Advisories · Technology
@fastify/middie.
Every CVE that names @fastify/middie among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch
- @fastify/middie
- CWE-436
- CVSS 9.1 CriticalCritical · CVSS 9+
@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
- @fastify/middie
- CWE-436
- CVSS 7.5 High
@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths
- @fastify/middie
- CWE-248
- CVSS 9.1 CriticalCritical · CVSS 9+
@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values
- @fastify/middie
- CWE-436